Roles and ClusterRoles in Kubernetes - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a Role in Kubernetes?

A Role defines permissions within a specific namespace. It controls what actions a user or service can perform on resources inside that namespace.

beginner

What is a ClusterRole in Kubernetes?

A ClusterRole defines permissions across the entire cluster or can be used in any namespace. It controls actions on cluster-wide resources or multiple namespaces.

intermediate

How does a Role differ from a ClusterRole?

A Role is limited to one namespace, while a ClusterRole applies cluster-wide or to multiple namespaces. ClusterRoles can also grant access to cluster-scoped resources.

intermediate

What is the purpose of RoleBinding and ClusterRoleBinding?

RoleBinding assigns a Role to users or groups within a namespace. ClusterRoleBinding assigns a ClusterRole to users or groups cluster-wide or across namespaces.

intermediate

Can a ClusterRole be used in a single namespace?

Yes, a ClusterRole can be bound to a user or group in a specific namespace using a RoleBinding, allowing cluster-wide permissions to be applied locally.

What scope does a Kubernetes Role apply to?

A The entire cluster

B A single namespace

C Multiple clusters

D Only system namespaces

A Role applies permissions only within a single namespace.

Which Kubernetes object grants cluster-wide permissions?

A Role

B Namespace

C RoleBinding

D ClusterRole

ClusterRole grants permissions across the entire cluster.

How do you assign a ClusterRole to a user in a specific namespace?

A Using ClusterRoleBinding

B Using NamespaceBinding

C Using RoleBinding

D Using PodSecurityPolicy

RoleBinding can bind a ClusterRole to a user within a specific namespace.

Which object is used to bind a Role to a user?

A RoleBinding

B ClusterRoleBinding

C ServiceAccount

D Pod

RoleBinding assigns a Role to users or groups within a namespace.

Can a Role grant permissions on cluster-scoped resources?

A No, Roles are namespace-scoped

B Yes, always

C Only if combined with ClusterRole

D Only in system namespaces

Roles cannot grant permissions on cluster-scoped resources because they are limited to namespaces.

Explain the difference between a Role and a ClusterRole in Kubernetes.

Think about where each permission applies.

Describe how RoleBinding and ClusterRoleBinding are used to assign permissions.

Focus on how permissions are linked to users.